CVE-2005-0976: Apple Safari

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.

Affected products

• Apple Safari: version 1.2 only
• Hmdt Shiira: version 0.93 only
• Omnigroup Omniweb: version 5.1 only

Published 2005-05-02. Last modified 2026-06-16.